Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier: GbXwej3eVqf2eVDbp4Oq3Ca8SItCefdHjxhk5JLu+Bc=
Subject key identifier: B7:67:2C:F5:46:B9:3E:D8:3D:09:1E:3C:CE:F2:FA:98:03:90:7E:3D
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 0197B77C8DBEADABF63A197402F920F98DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: 7gqYQwNf1aMXginWT+YkFuLpRSQd59CcuxQB8BDHuq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8d:be:ad:ab:f6:3a:19:74:02:f9:20:f9:8d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=b7672cf546b93ed83d091e3ccef2fa9803907e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:35:22:aa:b7:50:5b:d1:e7:e1:7d:d2:e3:
96:9d:09:e2:64:07:8f:fc:ee:aa:23:40:f2:8d:41:
63:e8:21:6c:de:92:c2:ad:26:97:40:a1:05:bc:f2:
a4:cf:bf:5f:64:bd:9d:40:e0:b7:a5:0f:d7:4d:9e:
ed:8f:7b:f6:b3:ba:7a:f1:f7:6f:da:5b:89:fd:01:
97:39:09:fb:99:7c:77:f4:16:67:b3:67:ff:bd:df:
e5:5c:61:c1:fb:9b:7b:7c:35:cb:3e:ab:a9:12:bf:
cd:94:61:30:e4:a2:29:22:89:3e:ff:e5:85:2a:51:
e7:cf:9d:99:9b:9d:67:4d:3e:26:60:48:83:80:b1:
22:60:20:c3:aa:62:af:dd:72:f3:a7:6e:73:f8:7a:
f3:2c:75:b3:e1:d4:e7:dc:01:e9:7d:6e:3e:be:72:
70:a5:c0:30:6b:5f:ca:7b:13:49:7b:c4:db:74:58:
94:1e:98:75:ec:10:08:8e:26:90:fe:65:f7:79:e7:
ae:55:3a:a9:9a:e3:a8:10:e6:67:0e:fc:19:a5:43:
1b:3a:95:c7:00:25:d4:43:5e:d7:7e:43:27:58:46:
b4:1f:f7:21:50:d2:c0:4c:26:bd:f6:9c:6f:ad:28:
14:3f:cd:1d:15:ac:2a:63:67:7f:25:95:7b:bd:68:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:2C:F5:46:B9:3E:D8:3D:09:1E:3C:CE:F2:FA:98:03:90:7E:3D
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2d:57:09:48:03:e7:4c:ad:4c:96:a6:e9:e9:82:64:1c:11:
12:64:00:54:df:ee:1f:fd:d2:72:f9:85:ea:25:26:a9:ff:7a:
e6:c4:f7:af:7e:ed:06:db:90:ed:51:57:62:c4:44:12:fc:15:
a8:18:3d:ee:2e:6c:60:52:44:c1:20:54:18:00:69:fe:cd:66:
28:de:db:19:de:5f:9c:c8:b2:31:5c:05:b1:91:17:f3:06:d0:
5c:07:c1:ad:1b:b3:ac:e3:5a:65:90:08:f1:90:ca:27:3d:e3:
78:da:ca:f3:e5:36:92:75:a5:23:a8:eb:aa:b9:b3:ff:bd:83:
6a:45:c7:f3:a5:68:38:81:de:82:ed:96:ce:55:1d:ee:c4:c9:
03:a6:4d:b9:2c:b7:19:2a:44:4d:0e:7e:a9:54:e1:91:cb:30:
87:e3:2b:8b:5a:f6:9c:3c:64:7e:c1:20:8e:00:65:93:e7:f2:
e7:e0:ff:07:30:73:86:05:83:f6:5c:2d:91:71:0f:5e:23:1c:
21:35:a5:d2:0b:31:7b:94:97:43:6a:2e:7c:6f:3d:a8:d3:83:
72:71:52:7b:2f:71:74:76:b7:d2:c2:39:4f:4b:65:d9:fa:66:
9f:42:87:6a:7e:dd:05:8c:e8:5b:32:d5:ce:4f:82:f9:84:91:
16:a8:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:09 2025 by rpki-client